Is your PHP version at risk of PHP2Shell RCE? Check Free Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

The .bank TLD: Benefits and Downsides SOCRadar

The .bank TLD: Benefits and Downsides

The world has changed rapidly since the invention of the Internet. One of the most important aspects it affected is using the Internet for banking. According to  Forbes , as…

Sandworm Attackers Use WinRAR to Wipe Data from Government Devices SOCRadar

Sandworm Attackers Use WinRAR to Wipe Data from Government Devices

Sandworm (UAC-0165) , a Russian hacking group, has been linked to an attack on Ukrainian state networks that involved wiping data from government devices using WinRAR, according to an  advisory…

GoAnywhere MFT Vulnerability Contributes to 91% Increase in Ransomware Attacks SOCRadar

GoAnywhere MFT Vulnerability Contributes to 91% Increase in Ransomware Attacks

[May 4, 2023] Update: Brightline, a mental health provider, was among the organizations targeted by the Clop ransomware group in March. Read the subheading “Data Breach of Brightline Impacts Over…

LOBSHOT hVNC Malware: A New Threat Distributed Through Google Ads SOCRadar

LOBSHOT hVNC Malware: A New Threat Distributed Through Google Ads

Cybersecurity researchers have discovered a new malware, called ‘ LOBSHOT ,’ distributed through Google ads. This malware allows cybercriminals to take over infected Windows devices by using hVNC. The hVNC…

Dark Web Profile: BlackByte Ransomware SOCRadar

Dark Web Profile: BlackByte Ransomware

Ransomware has been one of the most glaring threats against organizations in recent years. Since 2021 SOCRadar has detected around  5,600 ransomware attacks . There was a rise from 2021…

SOCRadar Technical Whitepaper: ‘Snapshot of 70 Million Stealer Logs’ SOCRadar

<strong>SOCRadar Technical Whitepaper: ‘Snapshot of 70 Million Stealer Logs’</strong>

SOCRadar’s first technical white paper is out! Here are some highlights: Threat actors created fake data to increase the number of records. Stealer software commonly runs in the Downloads folder…

Global Malverposting Campaign Infecting Over 500,000 Devices SOCRadar

Global Malverposting Campaign Infecting Over 500,000 Devices

A global  malverposting  campaign that has been ongoing for the past three months has been traced back to a Vietnamese threat actor.  Malverposting is the practice of distributing malware to…

Salesforce Credentials Leak, Admin, and Webshell Access Sales, Partnership Announcements SOCRadar

Salesforce Credentials Leak, Admin, and Webshell Access Sales, Partnership Announcements

We are experiencing a period in which threat actors are increasingly outsourcing and growing the cybercrime network. SOCRadar researchers have previously addressed these issues in their  initial access  and  vulnerability…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action